36eb3556b938bb8db4a2e899ba06e10dbc8d82e02faafaf5fbe8a2adbc4fa1eb

Analysis

max time kernel
145s
max time network
155s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/08/2024, 09:33

Target

b722ccbbae835f0f6a2d3eb5e0c70ab0_JaffaCakes118.exe
Size

59KB
MD5

b722ccbbae835f0f6a2d3eb5e0c70ab0
SHA1

cf0e57249c74797893ce4d3eec757cdc0a20d4ef
SHA256

36eb3556b938bb8db4a2e899ba06e10dbc8d82e02faafaf5fbe8a2adbc4fa1eb
SHA512

c145be710e5bb20c4ee65f9ad75e3f94af38da0d36a4e29475030a8c0dfa334deda63548df227878d847ddb7c43ee6b8920e7437cb4fe8a96b927c90bf3a9df4
SSDEEP

1536:DqI7p+so2CP/y2ny/9qMwgDeutftx0wBgAwMAs1Fgok:DqI7p+s/Cy28Ih8fWG1

Score

7^/10

upx

UPX packed file 11 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1668-0-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-4-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-5-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-6-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-7-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-8-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-9-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-10-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-51-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-59-0x0000000000400000-0x000000000041F000-memory.dmp	upx
behavioral1/memory/1668-60-0x0000000000400000-0x000000000041F000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\b722ccbbae835f0f6a2d3eb5e0c70ab0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b722ccbbae835f0f6a2d3eb5e0c70ab0_JaffaCakes118.exe"
1⤵
PID:1668

C:\Users\Admin\AppData\Local\Temp\peers.ini

Filesize
1KB

MD5
fe1d8a43cb0ae7a9657f2635f676bdd4

SHA1
fc179c0613e5bdf47179beacead7ec0c3d4de989

SHA256
ebf4cce526dfa6a0ba7ccaf6c2394a9161b54a6d5b6e8c8ad34b5aeb2347217f

SHA512
63fc1f8dd611b5c1fbc3a1a1cdffff396df8098b44da344379ae5a373c044633640c475d4547a4895c81357fd597f0a845eefdd030b49ae354e7991d25fb779f

Download Submit
memory/1668-0-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-4-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-5-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-6-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-7-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-8-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-9-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-10-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-51-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-59-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download
memory/1668-60-0x0000000000400000-0x000000000041F000-memory.dmp

Filesize
124KB

Download